docs(05-employee-design): create gap closure plan for RBAC and error handling fixes

.planning/ROADMAP.md

@@ -103,12 +103,13 @@ Plans:
   3. A template-deployed agent is immediately functional — responds in connected channels with the template's persona, tools, and escalation rules
   4. The wizard and templates are accessible to both platform admins and customer admins (respecting RBAC)
   5. Created agents appear in the Agent Designer for further customization after initial setup
-**Plans**: 3 plans
+**Plans**: 4 plans
 
 Plans:
 - [ ] 05-01-PLAN.md — Backend: AgentTemplate model, migration 007 with 7 seed templates, template list/deploy API, system prompt builder, unit + integration tests
 - [ ] 05-02-PLAN.md — Frontend: three-option entry screen, template gallery with one-click deploy, 5-step wizard (Role/Persona/Tools/Channels/Escalation), Advanced mode relocation
 - [ ] 05-03-PLAN.md — Human verification: test all three creation paths, RBAC enforcement, system prompt auto-generation
+- [ ] 05-04-PLAN.md — Gap closure: add /agents/new to proxy RBAC restrictions, hide New Employee button for operators, fix wizard deploy error handling
 
 ## Progress
 
@@ -121,7 +122,7 @@ Phases execute in numeric order: 1 -> 2 -> 3 -> 4 -> 5
 | 2. Agent Features | 6/6 | Complete    | 2026-03-24 |
 | 3. Operator Experience | 5/5 | Complete    | 2026-03-24 |
 | 4. RBAC | 3/3 | Complete    | 2026-03-24 |
-| 5. Employee Design | 3/3 | Complete   | 2026-03-25 |
+| 5. Employee Design | 3/4 | Gap Closure | 2026-03-25 |
 
 ---